Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          nCcNOdNh9GtNr34Ke5LgkJMPaCqPdPH2M7LTRLIbu2Y=
Subject key identifier:   EB:43:0C:08:D9:FC:47:CF:4F:42:38:44:39:CF:50:EF:C2:69:C7:53
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       019873E33041346F8D9F9924C6FB31183CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:02:05 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:05 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:05 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: gwzYbD8y/KGaXTihrAY5M1dloNVoV2CRIBkPF48gN98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:30:41:34:6f:8d:9f:99:24:c6:fb:31:18:3c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Aug  4 07:02:05 2025 GMT
            Not After : Aug  5 07:02:05 2025 GMT
        Subject: CN=eb430c08d9fc47cf4f42384439cf50efc269c753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:f0:f4:de:b1:f1:0d:7f:b6:0e:a7:69:93:
                    e7:a1:6a:85:f2:13:08:a5:d4:14:e7:c1:ef:82:a3:
                    87:98:90:b4:4c:ca:18:ef:6d:33:0b:69:32:8a:ed:
                    ee:33:57:71:d3:62:e5:87:3a:21:84:12:3c:7d:a8:
                    54:ed:9e:c9:2c:7d:5f:6d:42:db:8e:84:75:ce:5f:
                    13:97:51:7b:44:a7:15:61:53:27:34:06:ce:31:0c:
                    60:42:2e:37:a7:0a:8b:43:51:97:6c:6e:a6:fc:79:
                    b9:e7:39:17:79:5e:0d:99:c0:81:31:a4:9b:df:c0:
                    72:34:5c:04:23:57:fc:06:16:51:e4:ef:48:13:16:
                    fe:b5:ca:24:ea:f0:c1:c8:ba:e1:fc:db:0a:a1:7d:
                    3b:56:f1:10:47:c7:7c:c1:6f:18:a7:32:ea:2b:b9:
                    10:32:94:bc:13:7c:bf:e7:e6:78:d5:67:bc:81:91:
                    f6:6d:9a:31:20:f8:cf:36:0d:bc:90:15:3e:87:1a:
                    76:ca:65:0a:28:9c:8b:71:73:40:b7:4d:9f:e9:88:
                    5f:c3:e9:8b:1d:d6:aa:b8:7b:3f:6c:25:21:f6:e8:
                    da:a4:b5:6c:aa:b2:24:3c:12:01:a8:73:b9:69:6a:
                    8b:74:63:27:86:fd:e7:61:68:4b:45:ee:57:57:d3:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:0C:08:D9:FC:47:CF:4F:42:38:44:39:CF:50:EF:C2:69:C7:53
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:56:20:64:1a:68:81:12:42:82:61:71:b5:8b:26:02:5e:
         93:61:f2:c1:87:2e:c3:03:c6:1a:a9:89:e7:7c:89:6a:f1:0d:
         c5:c5:9d:55:65:55:47:29:c8:1e:bb:01:72:44:1d:57:f1:56:
         91:f6:b4:12:2e:49:7e:55:32:5b:c1:0b:7b:87:43:be:9d:fb:
         fd:2a:57:b4:aa:4c:2a:33:8a:aa:10:ee:dc:6a:8f:2d:4e:a1:
         61:ba:ec:7e:cf:6e:15:a3:4c:cd:74:03:15:c8:3b:40:a8:19:
         37:9b:60:f0:56:59:5a:d3:39:b4:bf:42:d2:84:9a:28:3f:5d:
         4e:da:e2:5d:69:dc:55:12:f3:a4:40:f8:3e:e3:ae:28:ec:a5:
         0f:c1:bd:7b:a5:51:b5:6f:49:09:40:d4:8b:d0:6e:9e:f0:04:
         09:9c:36:2c:b0:8b:a4:b8:ad:e9:87:d4:cd:a9:e7:ec:3a:2f:
         b3:b3:b1:2b:19:65:9d:32:a3:2e:b2:fc:a0:ac:71:77:90:e6:
         c8:f0:24:4a:1f:e2:5a:84:65:49:bb:8f:ec:6d:8a:03:0b:bb:
         3c:c5:e5:25:9c:9d:3c:91:09:76:7d:bb:e3:b9:21:24:9c:fc:
         2e:5e:6b:08:ce:fa:8e:47:0b:f3:2f:e6:54:e9:38:c8:0e:f0:
         9c:eb:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:06 2025 by rpki-client